Privacy Policy

Karibisha is operated by Advantage Online ("we," "us," or "our"), a company registered in Kenya. We are committed to protecting your privacy and ensuring the security of your personal information in accordance with the Kenya Data Protection Act, 2019 and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our event management platform at karibisha.events.

By using Karibisha, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Create an account (name, email address, password, phone number)
• Create or manage events (event details, descriptions, images, venue information)
• Purchase tickets (billing information, payment details)
• Register for events (contact information, preferences)
• Contact our support team (messages, attachments, contact details)
• Complete surveys or provide feedback
• Apply to be a co-host or team member

1.2 Information We Collect Automatically

When you use Karibisha, we automatically collect certain information, including:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on the platform, clicks, navigation paths
• Location Data: Approximate location based on IP address (with your consent for precise location)
• Cookies and Similar Technologies: Session cookies, preference cookies, analytics cookies
• Transaction Information: Purchase history, ticket sales, payment processing data

1.3 Information from Third Parties

We may receive information from:

• Payment processors (Stripe, Paystack, M-Pesa) for transaction processing
• Social media platforms if you choose to connect your accounts
• Analytics providers to understand platform usage
• Event organizers who add you as an attendee or co-host

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Create and manage your account, process transactions, deliver tickets, enable check-in
• Communicate: Send confirmations, reminders, updates, newsletters, and marketing communications
• Improve Platform: Analyze usage patterns, troubleshoot issues, develop new features
• Networking: Facilitate attendee matchmaking and networking connections at events (when enabled by the organizer)
• Security: Detect and prevent fraud, protect against unauthorized access, ensure platform safety
• Compliance: Comply with legal obligations, enforce our terms, resolve disputes
• Analytics: Generate reports for event organizers, measure event performance
• Customer Support: Respond to inquiries, resolve issues, provide assistance

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Event Organizers

When you register for an event, we share your registration information (name, email, phone) with the event organizer to facilitate your attendance.

3.2 With Service Providers

We share information with trusted service providers who help us operate, including:

• Payment processors (Stripe, Paystack, M-Pesa)
• Email service providers (for transactional and marketing emails)
• Cloud hosting providers (data storage and infrastructure)
• Analytics providers (Google Analytics, Mixpanel)
• Customer support tools

3.3 For Legal Reasons

We may disclose information if required by law, legal process, or government request, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Enforce our Terms of Service

3.4 Business Transfers

If Karibisha is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for platform functionality (authentication, security)
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track ad performance and show relevant advertisements

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

5. Data Security

We implement industry-standard security measures to protect your information:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Employee training on data protection
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Portability

You can access and download your personal data through your account settings or by contacting us.

6.2 Correction and Update

You can update your account information at any time through your profile settings.

6.3 Deletion

You can request deletion of your account and personal data. Note that we may retain certain information for legal or legitimate business purposes.

6.4 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any email or updating your communication preferences.

6.5 Cookie Preferences

You can manage cookie preferences through your browser settings or our cookie consent tool.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (tax, accounting, anti-fraud)
• Resolve disputes and enforce agreements
• Maintain business records

After account deletion, we may retain anonymized or aggregated data for analytics purposes.

8. International Data Transfers

Your information may be transferred to and processed in various countries worldwide. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Data processing agreements
• Adequate data protection measures

9. Children's Privacy

Karibisha is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for material changes)

Your continued use of Karibisha after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Kenya Data Protection Act, 2019

Advantage Online is registered and licensed by the Office of the Data Protection Commissioner (ODPC) in Kenya and fully complies with the Kenya Data Protection Act, 2019. Under this Act, you have the following rights as a data subject:

12.1 Your Rights

• Right to be informed: You have the right to know what personal data we collect, why we collect it, and how it is used.
• Right of access: You may request access to the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to deletion: You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to object: You may object to the processing of your personal data in certain circumstances, including direct marketing.
• Right not to be subject to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

12.2 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: You have given consent for specific purposes (e.g., marketing communications, newsletter subscriptions).
• Contract: Processing is necessary for the performance of a contract (e.g., providing event management services, processing registrations).
• Legal obligation: Processing is necessary to comply with Kenyan law (e.g., tax records, fraud prevention).
• Legitimate interest: Processing is necessary for our legitimate business interests (e.g., platform security, service improvement), provided these do not override your rights.

12.3 Data Shared with Event Organizers

When you register for an event, your registration data (name, email, phone, and any custom registration fields) is shared with the event organizer. The organizer becomes an independent data controller for that data and is responsible for their own compliance with the Data Protection Act. We require organizers to handle attendee data responsibly, but we are not liable for how organizers use data outside the Karibisha platform.

12.4 Filing a Complaint

If you believe your data protection rights have been violated, you may:

• Contact us at privacy@karibisha.events to resolve the matter directly.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), the supervisory authority in Kenya, at www.odpc.go.ke.

13. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@karibisha.events.